Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/c65e48-31c4-4974-89f4-ac2ae483955e/1/GZgd6LdyA5RZREi3oOYlwzo43GY.mft
File: GZgd6LdyA5RZREi3oOYlwzo43GY.mft (raw, json)
Hash identifier: d4jhD/f5VtWTzxVbyNyWm0QDSKAYEpnE67kEGMpLgTY=
Subject key identifier: 10:79:02:FB:65:53:FC:84:33:AA:D2:ED:D7:06:7B:01:92:A9:FE:CC
Authority key identifier: 19:98:1D:E8:B7:72:03:94:59:44:48:B7:A0:E6:25:C3:3A:38:DC:66
Certificate issuer: /CN=19981de8b7720394594448b7a0e625c33a38dc66
Certificate serial: 0196B85A0BEC84027EC6913220D5F2E9156E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZgd6LdyA5RZREi3oOYlwzo43GY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/c65e48-31c4-4974-89f4-ac2ae483955e/1/GZgd6LdyA5RZREi3oOYlwzo43GY.mft
Manifest number: D1
Signing time: Sat 10 May 2025 04:00:31 +0000
Manifest this update: Sat 10 May 2025 04:00:31 +0000
Manifest next update: Sun 11 May 2025 04:00:31 +0000
Files and hashes: 1: GZgd6LdyA5RZREi3oOYlwzo43GY.crl (hash: 68jq+B3o7Npp7akFXBRkVijBWyr7/CE4DKP/ajI4oAg=)
2: rJMIHQLkxom4E-e7Qy3aYsdGMVA.roa (hash: Fg5t4xG81KRwBzgiOaCNb7xH+qvhUM++MTkXaN72cEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/c65e48-31c4-4974-89f4-ac2ae483955e/1/GZgd6LdyA5RZREi3oOYlwzo43GY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/c65e48-31c4-4974-89f4-ac2ae483955e/1/GZgd6LdyA5RZREi3oOYlwzo43GY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GZgd6LdyA5RZREi3oOYlwzo43GY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:5a:0b:ec:84:02:7e:c6:91:32:20:d5:f2:e9:15:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19981de8b7720394594448b7a0e625c33a38dc66
Validity
Not Before: May 10 04:00:31 2025 GMT
Not After : May 11 04:00:31 2025 GMT
Subject: CN=107902fb6553fc8433aad2edd7067b0192a9fecc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0d:54:d6:7a:51:ff:0f:03:73:3c:71:82:84:
7d:3f:ee:c5:a1:b9:62:38:ee:5a:e7:14:35:74:ca:
84:66:4c:b9:8d:2d:c7:bc:06:1a:23:d3:8d:11:70:
93:62:ca:4c:10:02:91:e6:b4:30:13:ea:d1:a8:20:
d3:ed:53:ba:ad:09:2d:a1:e6:b6:a9:5d:bf:19:8b:
d9:88:ff:c4:26:33:18:79:49:62:e5:9d:68:25:43:
64:c4:5e:e9:4e:41:e7:a3:7a:11:05:e9:1b:21:4a:
d2:7a:89:01:f2:66:1b:2c:4b:eb:85:92:33:6d:94:
f0:56:81:cf:09:7c:59:30:00:9e:a8:cf:a7:54:5b:
70:a0:c5:68:fe:79:9c:ef:19:c7:73:78:b8:dc:f2:
21:ff:44:d2:01:9a:48:6b:5b:a8:34:bd:c2:78:3a:
5b:69:44:de:f6:48:e0:a0:9f:96:31:fd:52:cb:69:
07:59:04:d6:56:6d:9b:6a:ed:a7:55:d7:4e:13:4d:
59:f6:dd:43:43:72:1f:1e:e3:9e:85:89:08:d9:0d:
69:80:fa:d2:e5:e0:de:cf:76:a1:ae:4d:f1:11:ac:
c3:b1:7a:ad:22:ec:74:02:a8:5d:6c:55:c2:02:5f:
ca:b6:0e:82:b8:53:4b:c6:5a:65:37:f5:7d:92:c0:
bd:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:79:02:FB:65:53:FC:84:33:AA:D2:ED:D7:06:7B:01:92:A9:FE:CC
X509v3 Authority Key Identifier:
keyid:19:98:1D:E8:B7:72:03:94:59:44:48:B7:A0:E6:25:C3:3A:38:DC:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZgd6LdyA5RZREi3oOYlwzo43GY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/c65e48-31c4-4974-89f4-ac2ae483955e/1/GZgd6LdyA5RZREi3oOYlwzo43GY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/c65e48-31c4-4974-89f4-ac2ae483955e/1/GZgd6LdyA5RZREi3oOYlwzo43GY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:d3:3d:21:d8:79:86:24:41:0a:de:21:f9:5c:49:6d:14:92:
f2:02:63:8d:78:23:7a:f5:d9:eb:89:e1:db:8d:57:51:85:54:
09:78:e4:8d:fd:b3:5e:08:61:44:b8:c3:8a:69:a2:33:c8:43:
a8:cf:3a:37:5b:82:6c:53:db:d0:ed:16:23:32:37:08:58:64:
7f:72:5e:dc:fa:0c:51:e6:e9:aa:c3:b2:d4:1b:10:42:aa:11:
3a:6c:e7:b5:b5:16:4f:9a:51:4e:9d:64:18:2e:c3:bd:34:68:
9b:7e:ba:75:68:52:23:f1:c7:a8:2b:0e:f9:06:07:a2:0d:fb:
86:2f:82:b6:71:6a:2f:01:65:04:85:bf:db:81:dc:aa:69:6c:
7d:a8:80:0d:78:3e:08:79:84:ca:61:07:3f:35:a7:c0:b1:ed:
31:39:b8:18:29:b3:e7:0a:61:df:eb:84:ae:9d:ee:17:bc:54:
8d:62:e7:06:7d:ac:31:7e:68:d5:09:18:e0:c0:2d:ca:3b:5f:
d3:23:1c:d7:58:ed:e8:a6:dd:bc:3c:33:c0:d2:80:63:5a:97:
c2:6d:0b:73:74:cc:d9:d5:11:e8:58:a4:4f:19:e5:fe:7c:e8:
8f:ac:40:a7:f8:6e:71:87:0e:fc:4d:7f:7e:86:50:ae:67:30:
be:38:43:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 09:57:17 2025 by rpki-client